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Abstract 



Weak affine light typing (WALT) assigns light affine linear formulae as types to a subset of A-terms of 
System F. WALT is poly-time sound: if a A-term M has type in WALT, M can be evaluated with a polynomial 
cost in the dimension of the derivation that gives it a type. The evaluation proceeds under any strategy 
of a rewriting relation which is a mix of both call-by-name and call-by-value /3-reductions. WALT weakens, 
namely generalizes, the notion of "stratification of deductions" , common to some Light Systems — those 
logical systems, derived from Linear logic, to characterize the set of Polynomial functions — . A weaker 
stratification allows to define a compositional embedding of Safe recursion on notation (SRN) into WALT. 
It turns out that the expressivity of WALT is strictly stronger than the one of the known Light Systems. 
The embedding passes through the representation of a subsystem of SRN. It is obtained by restricting the 
composition scheme of SRN to one that can only use its safe variables linearly. On one side, this suggests 
that SRN, in fact, can be redefined in terms of more primitive constructs. On the other, the embedding of 
SRN into WALT enjoys the two following remarkable aspects. Every datatype, required by the embedding, 
is represented from scratch, showing the strong structural proof-theoretical roots of WALT. Moreover, the 
embedding highlights a stratification structure of the normal and safe arguments, normally hidden inside 
the world of SRN-normal/safe variables: the less an argument is "polyomially impredicative", the deeper, 
in a formal, proof -theoretical sense, it is represented inside WALT. Finally, since WALT is SRN-complete it is 
also polynomial-time complete since SRN is. 
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1 Introduction 

Implicit computational complexity (ICC) explores machine-independent characterizations of complexity 
classes without any explicit reference to resource usage bounds, which, instead, result from restricting 
suitable computational structures. Contributions to ICC can have their roots in the recursion theory [Cob65 
IBC92IID^MlLei95[|LeT99[|LMI , in th e structural proof-theory and linear logic HGir98IILaf04l , in the rewriting 
systems or functional programming BHue80llDer82l|Jon99tlLei93 Lei94J, in the type systems BHof97llHof99al 
IHof99b[lHof00llBNS00llB§0Tl . . . . 

One specific goal of ICC is to make evident that the known complexity classes are concepts with an intrin- 
sic mathematical nature. A way of achieving the goal is to formally relate the known ICC characterizations. 

Here, we accomplish the goal relatively to two ICC systems that characterize the class FP of Polynomial 
functions. Specifically, we formally relate the basic concept of "predicative recursion" of Safe recursion on 
notation (SRN) [BC92[, and the notion of "stratification of the derivations", basic for Light linear logic (LLL) 
[Gir98] and for various proof/type theoretical systems, derived from it. The strategy to formalize the relation 
is to embed, inductively, SRN into Weak affine light typing (WALT) [Rov07[, a type system for pure A-terms 



that strictly generalizes Intuitionistic light affine logic (ILAL) I Asp98[ IAR021 ITerOl 1 ITer07l 

Recall that SRN is a recursion theoretical system. It is generated from a set of basic functions, closed 
under the safe composition and safe recursion schemes. SRN captures FP by partitioning the set of arguments 
of each function g(n, s) into those that are normal, namely n, and those that are safe, i.e. s. The basic functions 
can only have safe arguments. The crucial features of a function f, defined by an instance of the safe recursive 
scheme, are: (i) the unfolding of / is driven by a normal argument, and (ii) the recursive call of / may only 
appear in a safe argument position, as far as the unfolding proceeds, ensuring that recursion over the result 
of a function defined by recursion is not possible. Section [4] formally recalls SRN. In fact, it also recalls 
Composition-linear safe recursion on notation (CISRN), already introduced in [Rov07] where, however, it was 
called as Quasi-linear safe recursion on notation. CISRN restricts SRN; It is defined on a set of basic functions, 
closed under the full safe recursion scheme of SRN and a linear safe composition scheme that uses linearly its 
safe variables. Namely, CISRN strictly generalizes BC~ |MO04|. Recall that BC~ is SRN where both the safe 
composition and recursion schemes can exclusively use their safe variables linearly. 

The reason to recall CISRN here is the following one. We already know that CISRN can be embedded 
into WALT IRov07l . By using that result, we show that, in fact, full SRN can be embedded into WALT, so 
relating "predicative recursion" to "stratification" without any restriction. 

Formally, the relation reads as follows. There exists an interpretation map J J from SRN to WALT, such 
that, for every f(n\, Si, ... ,s;) e SRN, with k normal and I safe arguments, we can prove that: (i) if 
/(tti, . . . ,n k ,si, . . . ,si) - n, then \f{n\, . . . ,n k ,s\, . . . , s/)] reduces to [«], using "~> a j, a rewriting relation which 
is a mix of both call-by-name and call-by-value ^-reductions, and (ii) \f{n\, . . . ,n k ,S\, . . . , S;)] has type $'" W, 

k I 



since [/] has type $W $W — $ m W — ... — $"'W — $'"W, for some m > 1, the type W being the 

one for binary words in WALT. 

Point (i) shows that WALT is SRN-complete. Namely, WALT is the first system, derived as a restriction of 
Linear logic to characterize FP, where full SRN can be embedded. 

Point (ii) links m to the complexity of the definition of /: m depends on the number of nested safe 
compositions and of safe recursive schemes that define /. The types explicitly show a layered structure 
inside the normal and safe arguments of SRN: the type of a safe argument is m > 1 $-modality occurrences 
deep because a safe argument can be used in the course of a recursive unfolding to produce a result. 
Orthogonally, the depth of the type of every normal argument is limited to 1, so giving to every normal 
argument the necessary "replication power", required to duplicate syntactic structure in the course of an 
unfolding. On one side, this means that the Light linear logic-like systems say that the weaker is the 
possibility of a word to replicate structure, behaving it as an iterator, the deeper is its type. On the other, the 
recursive systems like SRN are based exactly on the reversed idea, though this cannot be formally stated in 
terms of any typing information inside SRN. 

A further consequence of embedding SRN into WALT is that we obtain a second version of such a proof, 
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the first being in [ Rov07 1 . Recall that "polytime completeness" means that every polynomial Turing machine 
can be represented as a term of WALT. 

However, a more relevant consequence of looking for the formal relations between two systems like SRN 
and WALT, as we have just done, is the way we prove the SRN-completeness of WALT. We shall see that it 
is obtained by simulating the full composition scheme of SRN through the linear safe composition scheme of 
CISRN and its full recursive scheme, which coincides to the one of SRN. This candidates CISRN to be a linear 
kernel of SRN, so pointing to the existence of a reformulation of SRN itself in terms of more primitive and 
linear constructs, as we shall discuss in the conclusions. 

Finally, we observe that WALT yields a higher-order characterization of FP in the lines of Higher type 
ramified recursion (HTRR) IBNSOOJ and Higher order linear ramified recursion (HOLRR) |DLMR04|, but 
with a relevant difference. Both HTRR and HOLRR build their terms by assuming the existence of constant 
symbols, like words, successors, etc.. On the contrary, no constant symbol is used inside WALT where 
everything is defined from scratch, exploiting its Il-order structural proof-theoretic roots. 

Outline. Section intuitively recalls the main intuitions about WALT, by pointing out how it weakens the 
design principles of ILAL. Section|3]recalls the technical parts of WALT, required to program the combinators 
that allow to represent the full composition scheme of SRN in WALT, as shown in Section |5j so yielding the 
SRN-completeness. Section|4]formally recalls SRN in the style of [BW96J. Section[7|delineates some possible 
research directions. 
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105 2 Overviewing WALT intuitively 

The full technical introduction of WALT is MRov07l . 

Here we want to recall the key ideas about WALT at an intuitive level. The main goal is to illustrate the 
main reasons why WALT is more expressive than other deductive systems, derived from Linear logic, to 
characterize the class of polynomial functions (FP). 

no Squaring chains. WALT contains the main "complex" structure of Intuitionistic light affine logic (ILAL) 
which we call squaring chain. A graph representation of an instance of squaring chain is in Figure[U(a). On 




Figure 1 : A squaring chain and its reduct 

top of it there is a tree of nodes, all the black triangles, that contract a set of assumptions of the given topmost 
$-box e. Below the tree of contraction nodes there is a list of !-boxes a.\, a2,a^. Every of them depends on at 
most a single assumption, which is the basic constraint of !-boxes of ILAL. Of course, generally, the number 
115 of contractions nodes and of !-boxes in a squaring chain is arbitrary and the tree they form need not to be 
perfectly balanced. The chain is dubbed as "squaring" because its normalization leads to the configuration 
in Figured] (b), where the size 0(max{p, r}), essentially, "squares" to a value which is 0(max{p, r) 2 ). 

Weak squaring and stuck chains. However, besides the squaring chains, WALT contains both weak squaring 
chains and stuck chains, and its expressive power relies on their existence. A graph representation of both 
120 types of chains is in Figure 12(a). The one to the left is a weak squaring chain. The other, to the right, is a 
stuck chain. 

The weak squaring chain contains a tree of contraction nodes. However, it is based on a more liberalized 
form of !-boxes. They may depend on more than one assumption: one of them must have a !-modal 
type, the others a $-modal type. The chain under description is "weak squaring" because only after we 
125 merge the $-boxes C\,c% into the !-boxes fli,fl2, respectively, it transforms to a squaring chain, with !-boxes 
fli x Ci,«2 x C2,fl3, that can be squared to the configuration to the left in Figure |3] We insist on observing 
that, before the merging of boxes, no squaring can occur. 

This is why the configuration to the right in Figure El(b) is a stuck chain, and not a weak squaring one. 
Its "squaring through normalization" cannot start, even if we merge £>2 and &i, because there is no $-box 
130 plugged into the assumption of type $A of the !-box b\. So, the chain to the right in Figure[2](b) is stuck until 
the context, eventually, supplies a closed $-box with conclusion $A that can be merged into b\, so yielding a 
squaring chain that we can "square". 

We conclude by remarking that the form of weak squaring and stuck chains is more general than the one 
in the given example. Indeed, not only a single closed $-box can be dangling down the $-modal assumptions 
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Figure 2: A weak squaring and a stuck chain 




Figure 3: The reduct of a weak squaring chain 



135 of a !-box, but there can be a whole tree whose nodes can only be $-boxes, which must be closed whenever 
they constitute the leaves of the tree itself. 

The lazy nature of WALT. WALT induces a call-by-value dynamics on the A-terms it gives types to as 
consequence of the more general form of its !-boxes, as compared to ILAL. As we have seen, a chain is stuck 
until the context supplies the $-boxes that close all the assumptions, with $-modal type, of those !-boxes 
mo that must be duplicated. All such assumptions are used to represent the parameters in the simulation of the 
full recursive scheme of SRN inside WALT, with the right type. We shall recall the main idea under some 
simplifying assumptions, to keep things more readable. 

Let us assume to have a function /, recursively defined as f(0, a) = g(a), and f(n, a) — h(n — 1, a, f(n — 1, a)), 
with n > 1. We want to show how simulating its top-down recursive unfolding: 

f(n, a) = h(n - 1, a, f(n - 1, a)) = . . . = h(n - 1, a, h(n - 2, a, . . . h(0, a, g(a)) ...)) 

by a bottom-up reconstruction that iterates some transition functions on suitable configurations and pre- 
configurations. The reconstruction requires to assume H, G be the interpretations of h, g, respectively, in 
WALT. Moreover, we assume the unary strings n, a, not words, represent n,am WALT. What we are going to 
say, though, keeps holding with / of arbitrary arity and with words as its arguments, instead of strings. In 
WALT we can develop sequences of computations like the following one, where all the terms can be correctly 
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typed: 

{(Ga,[0,...,0],[a,...,a]))^' w (1) 

n+1 n+1 

((Ga, (0, [1, . . .,!]), (a, [a, . . .,«]>» ~^>' m ((H0a(Ga), [1, ...,l],\a,.. .,«]» ~»; (2) 

n n n « 

«H0fl (GS), <T, [2, . . .,2]), (a, [a, . . .,«]»> ^;<<Hl«(H0«(Gfl)), [I, . . .,1], [a,... ,«]» . . . (3) 

n-l n— 1 n-l n-l 

The ideal column to the right of ~^>* m contains configurations, the topmost being the initial one. The column to 
the left of contains pre-configurations. Every pre-configuration comes from its preceding configuration 
by (i) separating head and tail of every list, and storing them as the two components of a same pair, (ii) only 
on the leftmost list, simultaneously to the separation, the successor is mapped on the tail. 

Every configuration, other than the initial one, is obtained from its preceding pre-configuration by the 
application of an instance of H to the first element of every pair, and to the first element of the whole 
pre-configuration, which accumulates the partial result of the bottom-up reconstruction. 

The main point for everything to work correctly in the above simulation is to produce [a,...,a] with the 

n+1 

right type. This is obtained by using the term in Figure 0] whose definition is substantially based on an 
instance of the more general !-box existing in WALT, but not in ILAL. The assumption of type $N in the !-box 
waits for a, one $-box deep. As soon as this value is supplied, the !-box is ready for the duplication by means 
of the contraction nodes that may be contained in the Church numeral n of type Va.!(a -° a) -° $(a -° a), 
which is the second argument of the whole term. Once both a and n have been given, the result of the whole 
term is a list of copies of a, whose type is the one we can expect: Va.!($N -° a -° a) -° $(a -° a), that we 
shorten as LN. The use of the assumption with type $N in the !-box is the key step to obtain a result of 
type LN which, somewhat, absorbs the $-box initially around the parameter of a. Without this merging we 
could not obtain a representation of the iterator whose safe arguments are at the same depth as the result, as 
required to represent the full recursion scheme of SRN in WALT. 



The full SRN-composition scheme in WALT. Once the full recursion scheme of SRN is at hand in WALT, 
we can use it to encode also the full composition scheme of SRN. Figure |5] shows an example of functional 
block diagram that summarizes how the full composition scheme of SRN becomes a term of WALT. Let us 
assume F, G, H\, H2 be terms of WALT that represent the SRN functions /, g, hi, h.2, respectively, and that we 
need to compose as follows. / takes one normal and two safe arguments which are supplied by g, that 
depends on a single safe argument, and by h\,h.2. Also, we assume that both hi, hz require a single normal 
argument, but h\ needs three safe arguments, while hz only one. The first operation to represent the full 
composition scheme of SRN in WALT is to generate the terms F, G,H\,H2- H\ will be obtained from hi as the 
result of an inductive translation, as we might expect. H2 will be defined from hz with the same inductive 
process. However, this would lead to a term with safe arity 1. To obtain a term H2 with safe arity 3, we 
extend the resulting term to erase two of its three safe arguments: H2 and the two bullets close to it in 
Figure |5] represent such a final term. The same holds for F which must erase its third safe argument. Notice 
that the safe value it erases is supplied by the dummy function ()••••, which is constantly equal to 0, after 
the erasure of all its arguments: one normal, the others safe. G, supplying it the normal value to F, does not 
present any problem. The translation process of the functions being composed, all with the same safe arity, 
occurs inside the square composition hJ' 3 : the topmost parameter 1 is the normal arity of every of the terms 
being composed, 3 is the maximal safe arity, namely, the value with respect to which we normalize the terms 
we generate, and the lowermost 1 is the normal arity of F. So, EL' 3 [F, G, Hi, Hz] has normal arity 1 and safe 
arity 9, since every of the three composed terms will have safe arity 3. After the normalized composition, 

the ideal functional block x rearranges the safe arguments: the first safe arguments of Hi,H2»», and ()•••• 

are put one closed to the others, and the same is done for the second and third ones. The goal is to share 
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$N -• N -o LN 

N -o LN 

i J 

L N = Va.!(N -o a -o a) -o $(« -o a) 

) 

!(N -o a -° a) -o $(a -o a) 
$(((6 -o 6) -o a) -o (6 -o 6) -o a) 




!(((6 -o 8) -o ») -o (6 -o {) -o a) 



((6 -o 6) -o a) -o (6 -o 6) -o a 



(6 -o 6) -o a 




(6 -o 6) -o a 



$N 

!(N -o a -o a) 



N = Va.!(a -o a) -o $(« -o a) 



Figure 4: The term that generates the list of constants in a recursive scheme 



each of the group into a single safe argument. This happens inside the functional block Y^ 3 which applies, 



one after the other, three further blocks OmY„; ' , OmY„, ' , OmY,„ ' '. The behavior of every of these blocks 
is to share three safe arguments in input into a single safe argument, and to rotate them so that a new group 
of safe arguments gets ready for the sharing of its components by means of the subsequent block. The 
sharing of the safe arguments is hidden inside the black triangles. Every of them contains two one-step long 
iterations that share the same safe value in the last two positions of a given term M. The following unfolding 
illustrates the idea about the behavior of one of such one-step long iterations: 



Y„, [M] «i si s 2 s 3 =M tii si s 2 s 3 (Y^f [M] n x s a s 2 s 3 ) 

= Mn 1 s 1 s 2 s 3 ((\xi y x y 2 y 3 .y 3 ) «i si s 2 s 3 ) 
= Mni si s 2 s 3 s 3 



(4) 



We insist remarking that iSJl gives only the idea of what happens. The definition of Y*f is based on the 
iteration term, typeable in WALT, and will be formally given in Section|5l together with its dynamics. Once 
the safe arguments of □ j' 3 [F, G, Hi, H 2 ] have been shared we are left with a term waiting for three safe and one 
normal arguments. The latter is replicated four times by that, standardly, iterates a tuple of successors, 

starting from a tuple of four instances of 0. Just to remark it again, the above translation mechanism, can be 
set for any normal and safe arities of any number of functions in SRN. 



OVERVIEWING WALT INTUITIVELY 




Figure 5: Functional block scheme of SRN-composition in WALT 



3 OVERVIEWING WALT TECHNICALLY 



10 



3 Overviewing WALT technically 

Here we recall the main aspects of Weak Affine Light Typing (WALT), as developed in [Rov07J, and which 
are required to present our results. Recall that WALT is a type assignment for A-terms. 

The A-terms. The A-terms are generated by the grammar M ::= x \ (\x.M) \ (MM), where x belongs to a 
countable set of A-variables. An abstraction \x.M binds the (free) occurrence of x in M. Given a term M, the 
set of its free variables, those ones which are not bound, is FV(M). A closed term has no free variables. The 
cardinality of a free variable in a term is no(x,M) and counts the number of free occurrences of x in M: 

no(x, x) = 1 no(x, y) = (x £ y) 

no(x, \x.M) = no(x, \y.M) = no(x,M) (x £ y) 

no (x,MN) = no(x,M) + no(x,N) 

no M{ Nl / Xl ■ ■ • N "' Ixm I denotes the usual capture free simultaneous substitution of every N, for the corresponding 
Xi, with 1 < i < m. Parentheses are left-associative, so ((• • ■ ((MM)M) • ■ ■ )M) shortens to MMM ■ ■ ■ M. A 

sequence of abstractions (\xi (\x m .M) . . .) is shortened by \x\ . . .x m .M, for any m. A v is the set of the 

A-terms which are values, generated by V ::= x \ (\x.M), where M is any A-term. The size of a term |M| gives 
the dimension of M as expected: \x\ = 1, \\x.M\ = \M\ + 1, \MN\ = \M\ + \N\ + 1. 

The types of WALT. They are formulae that belong to the language, generated by the following grammar: 

A ::= L \\A \ %A 

L ::= a | A -° A \ $A — A | Va.L 

175 A is the start symbol. A modal formula has form \A or $A, and, in particular, \A is !-modal, while $A is 
$-modal. L generates linear, or non modal, formulae, which are ranged over by L,U. Generic formulae by 
A, B, C, instead. Notice that the substitution of a in Va.L for a linear type L', produces L{ L ' /„} which is still 
linear. Somewhat conversely, a universal quantification cannot hide a modal type. 

The rules of WALT. Figure gives the deductive rules of WALT, which deduce judgments T; A;£ h M: A. 
180 T and A are sets of type assignments, namely of pairs x : A. £ is a set of pairs (©; O) such that both and O 

are sets of type assignments as well. 

Dom({xi :A\, . . . ,x n :A n )) = {x\, . . .,x n ] is the domain of any set {x\ :A\, . . .,x n :A„} of type assignments. T 

will denote a set of linear type assignments x : L. Every x e Dom(T) is called linear variable. A will denote a set 

of linear partially discharged type assignments. Every x e Dom(A) is called linear partially discharged. S will 
185 denote a set of partially discharged contexts. S can be either empty or it contains pairs (@i; Oi), . . . , (0„; O,,) 

where, for every i e {l,...,n}, the following four points hold: (i) 0, is a set of elementary partially discharged 

type assignment. Every x e Dom(0,) is called elementary; (ii) O, is either empty or it is a singleton x : A. 

We call x polynomial; (hi) only one between <E>i, . . . , O n can be 0; (iv) the domains of any two O, and Oy are 

distinct, whenever i + j. 

For every £ = UlLiK®*;® Dom(£) is ((J?=i Dom(0,)) U ({Jti Dom(<5,))- In every of the rules of WALT 
the domain of two sets of type assignments 3>m and <5n may intersect when <&m and <5n are part of two 
partially discharged contexts £m and £jv that belong to two distinct premises of a rule. This observation 
justifies the definition of £m U £jv that merges £m and £jv, preserving the structure of a partially discharged 
context: 

{(©m, ©n; 3>) I (0 M ; O) 6 £ M and (® N ; O) £ £ N }U 

{(© M ; Om) I (®m; 'I'm) 6 £>m and there is no @ N such that (@ N ; <E> M ) in £ N }U 
{(© N ; O n ) | (@ N ; O n ) e S N and there is no © M such that (@ M ; O n ) in S M ) 

190 The sequence £, (0; O) denotes that (0; <5) ^ £. Also, £u {(0; 0)} = £u = £. In every other cases, the domain 
of two sets of type assignments that belong to two distinct premises of a rule of WALT must be disjoint. A T is 
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r M/ r N ;A M/ A N ; £m u £ N hMN:B E 

r;A;fi,(0; {x:A}) \- M:B 
T; A;£u {(0;0)} I- \x.M:!A -o B ~° ! 

r M ;A M ;6 M hM:!A^B T N ; A N ;£ N h N:!A £ M £ {(0;$i), . . ., (0;O„)} _ 
Tm/ In; Am, Ajv; £m U£ N hMN:B 

r;A;£ / (0 / x:A;0)hM:B 
r;A;£u {(0;0)) h \x.M:$A • B ~* 1 

r M ;A;£ M l-M:$A-.B 0;0;£ N hN:$A £ N c {(0;0)} 

r M ;A;£ M U£ N h MN:B ~" £ 

r; A'; {(©'; 0)} h M:B r £ A U (J"i ©, U (J™i ®* ©i * iff *i = 
r'; $A', A; {($©'; 0)) U {(0 i; Oj)} U . . . U {(0 m ; O m )} h M: $B $ 

r;0;{(0';0)| hM:B Tc0uO * => Dom(O) n FV(M) * 
F; A; {($©'; 0)} U {(©;$)} h M:!B ! 

f; A;£ h M:L a not free in T, A and £ T; A;£ h M:V«.L 

r;A;£h M:V«.L W I; A;£ h M:L{L'/a] VE 



Figure 6: Weak Affine Light Typing 
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the subset of typeable elements M of A, namely, those for which a deduction n with conclusion T;A;£ \- M:A 
exists, denoted by Ft > T; A; £ h M : A. 

WALT and System F. WALT is a subsystem of System F. This means that if T; A; £ h M: A then M has type 
t(A) from the set of assumptions T(T; A; £) in System F, where: 

t(a) = a f(A -o B) = f(A) -> f(B) f($A) = f(A) 

f(Va.A) = Va.f(A) i(A -• B) = f(A) -> f(B) f(!A) = f(A) 

and T is the obvious extension of the map f to the types in T; A; £. 
3.1 On the rules of WALT 

The bound on the number of normalization steps of any deduction of WALT is a consequence of the stratified 
nature that WALT inherits from ILAL. "Stratification" means that every deduction II of WALT can be thought 
of as it was organized into levels, so that the logical rules of II may be at different depths. The normalization 
preserves the levels: if an instance of a rule R in Tl is at depth d, then it will keep being at depth d after any 
number of normalization steps that, of course, do not erase it. The only duplication allowed is of deductions 
II that have undergone an instance r of the ! rule, namely the conclusion of n has a ! -modal type, introduced 
by r. Ideally, the ! rule defines a, so called, !-box around the deduction that proves its premise. Figure [7] 
shows, side by side, a canonical instance of the rule ! and the !-box that would correspond to it if we imagined 
to associate a proof net notation to the derivations of WALT. The hypothesis is that 11^, with conclusion of 







\A 






A 


i 


%i :Ci, . . . ,x„ :C„,x:B;0;0 \- M:A n > => x e FV(M) 


f n M \ 




®;®;{({x 1 :C 1 ,...,x n :C n }}{x:B})}\-M:lA 


of 


c„ \b 








$C„ !B 



Figure 7: The canonical instance of !-box/rule in WALT 

type A and assumptions C\, . . . , C„, B, corresponds to the term M that has type B from the set of linear type 
assignments x\ : C\, . . . ,x„:C n ,x:B. The application of the rule ! corresponds to putting the !-box around 11m- 
The condition n>0^ie FV(M) assures that the substitution of some closed term N, with type !B, for 
x in M, cannot yield M{ N / x } that only depends on a single assumption. Namely, we want to avoid that a 
sequence of normalization steps, can yield a judgment 0; 0; {({xj : C\); 0)} h M' :!A, where !A says that it can 
be duplicated, but whose free assumption says that it cannot, since WALT does not have the contraction on 
$-modal assumptions. 

We remark that the !-box can be put around a derivation FI that may depend on more than one assumption, 
letting WALT be a strict generalization of ILAL, whose !-boxes, in the context of WALT, take the form: 

<J>;0;0 h M:B O C \x:A] 
0;0; {(0;O)) h M:\B 

The elementary partially discharged assumptions the generalized !-boxes may depend on can only be 
replaced, in the course of the normalization steps, by the conclusion of $-boxes exclusively depending on 
elementary partially discharged assumptions as well. Figure [8] shows, with the help of a net, that such 
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Figure 8: "Net" meaning of the rule -• E in WALT 
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T; A; £, (0; 0) h \x.M : $C -• A 
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Figure 9: "Net" meaning of the rules in WALT 



a behavior is a consequence of restricting £jv, in the rule -• E, to the form {(@;0)j. The rule -* E comes 
with — • I that can discharge elementary partially discharged assumptions only when the corresponding 

220 polynomial assumption has already been discharged by -o L, as in Figured] The net in such a figure shows 
the mandatory discharging order. Finally, Figure HUl shows, with the help of a net, how -o Ei consistently 
forces the application of some given M of type !B -o C to an N, of type !B, according to an order which 
reverses the one we must use to apply -o L, and -• I. 

Summing up, WALT allows to type A-terms more liberally than ILAL, while keeping the same normal- 

225 ization principles: the stratification is never canceled, and only deductions that, eventually, depend on at 
most one free variable may be effectively duplicated as effect of the normalization. This is why WALT does 
not enjoy a full normalizing procedure, the analogous of the cut elimination for a corresponding sequent 
calculus formulation, as the coming section recalls. 



3.2 The dynamics of WALT. 

230 Recall that the call-by-name, or lazy, /3-reduction on the A-terms is the contextual closure of rewriting relation 
(\x.M)N -^> n M{ N Ix). The call-by-value, or eager, jS-reduction, instead, is the contextual closure of (\x.M)N — > v 
M{ N / X ), where N eA v . 

The subject reduction of the rules in Figure |6]holds only on the following restriction ^>- l0 of — > n U — > v : 
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r M ;A M ;£ M h M: !B -o C 
r N ;A N ;£ N hN: \B 
6 M C{(0;Oi),... / (0;«i,)J 
r M ,r N ;A M ,A N ;£ M U £ N \-MN:C 



Figure 10: "Net" meaning of the rule -° Ei in WALT 



(\x.M)N ^> w M if no(x,M) = 
(\x.M)N^ a M{ N /.v| if no(x,M) = 1, and NeA, 
(\x.M)N^ w M{ N / X ) if no(x,M) > 1, and N e A v , and FV(N) c {y} 

is the transitive closure of while is the reflexive and transitive closure of "~*w M is in "~»a,-normal 
235 form, and we write nf (M), if ^ w cannot rewrite M anymore. 
We conclude by recalling two main features of WALT: 

Theorem 3.1 (Subject reduction (I Rov07l ).) r; A;£ h M:A and M ~~>* w N, imply T; A; £ h N: A. 

Theorem 3.2 (Polytime soundness (|Rov07|).) Let Tlbe a derivation of WALT whose conclusion be T; A; £ h M:A. 
Lei d(n) be the maximal depth of H, namely the maximal number of instances of the rules $, ! that we can traverse 
240 moving from the conclusion ofU, to every of its axioms instances. Then, M normalizes to its normal form nf(M) in a 
number of steps, hence in a time, which is 0(\U\ lem ),for some k. 

3.3 The combinators of WALT we need to recall 

We recall the main aspects of combinators that can be typed in WALT, and which are required to show the 
completeness of WALT w.r.t. SRN. The details are in |Rov07|. 

(Binary) Words. They are the terms: 

S = \01y.y 

2«i + 2»'-i • v ffl _! + • • • + 2° • v = \01y.v (- • • (v m _i(l y) • ■ • )) (m>l) 

245 that allow to encode the natural numbers in binary notation. Every word has type W = Va.!(a -o a) -o\(a -° 
a) -o $(a -o a), where m > and v <i< m -i £ (0, 1). Notice that every word is a Church numeral built using 
the two successors, identified by the variable names 0, and 1. The combinators Ws®, Wsl, and P, with type 
W -o W, and B, with type W -o W ^> W -o W, exist. They are the two successors, the predecessor and the 

branching, respectively. The branching yields its second argument as result, if the first one is the word 0. 
250 Otherwise, the result is the third argument. 
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Eager tensor. We need the eager tensor to represent tuples of A-terms. For every m > 1, the type eager tensor 
is Ofci Ai = Va.(-»™ j A, -• a) -o a. Its type constructors coincide to the standard tuples in the A-calculus: 

([M l ...M m )) = \z.zM l ...M m (m>l) 
\({xi . . . x m }).M = \ro.a;(\x 1 . . . x m .M) (m > 1) 

Here, we can fairly assume that only to closed terms can be used in ({Mi . . . M m |). In [Rov07| the constraint 
is a little bit more weak. So, for every closed M\, . . . ,M m , we have (\({xi • • ■x m ]).M) {{Mi, . . . ,M m }) 
{\xi...x m M)M 1 ...M m . 

Embedding. We can embed the arguments and the result of terms, with a functional type, into a suitable 
255 number of boxes. Since we have two kinds of implications, and we can transform the standard linear 
implication into an eager one, we have (at least) the following three kinds of embedding functors. 

The basic embedding is Eb"[M] = \x.Mx, for every n > 1. It takes a term M, with type L -o $ m A, for any 
m > 0, and yields one of type $"L -• $ m+n A. 

The linear embedding is Elp[M] = \x\ .. .x v .Mx\ . . .x p , for every n,p > 0. It takes a term M, with type 
260 (-o^ =1 U) -° $'"A, for every m > 0, and yields one of type (-o^ $"L,) -o $ m+n A. 
The eager embedding Eep ;i; [M] is: 

\w\ . . . w p z\ . . . Zq.(\w\ . . . Wp.Mwi . . . WpZ\ . . . z ? )(Eb 1 [Coerce"]?x'i) . . . (Eb 1 [Coerce"]?x'p), 

for every n,p,q > 0. It takes a term M of type {~* V i=l $W) -• {~* - = i $'"Lj) -• $ m A and yields one of type 
(— p . =1 $"W) — (— q . =1 $ m+n Lj) — % m+n A. 

Coercing. The coerce fvmction takes an instance of a binary word and reconstructs it inside a box. It is 

Coerce = \n.(\z.z0)(« WsQWsl). To our purposes, Coerce must be iteratively composed to reconstruct a word 
into some given number of boxes: 

Coerce = \x.x 
Coerce 1 = Coerce 
Coerce" ,+1 = \x.El 1 [Coerce m ](Coerce 1 x) (m > 1) 

For every m > 0, Coerce'" has type W -o $'"W. 
Eager diagonal. The eager diagonal V™ is: 

\w.(\z.z d0, . . .,0}))(w (\<{xi . . . x„)).(jEb m [Ws0] x x ,..., Eb"'[Ws0] x„}» 
(\<{xi . ..ai,MEb m [Wsl]ari # ... / Eb m [Wsl]* B W) 

for every m, n > 1 . It combines the copies of the word, given as its input, by means of an elementary tensor 

n 

265 constructor. Namely, VJ" a {{a, a}). Every copy is generated from scratch, by iterating the successors 
on words. The result is contained into a single box, but every component of the elementary tensor, in the 
result, is m boxes deep. Namely, V?/ has type W -o $(©" =1 $ m W). 
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Iterator. For every n, s > 0, and m > 1, and for every closed term Go, G\, and Gi, all with type $W -• (-»" =1 
$W) — (—* =i $ m W) — $'"W $'"W, the iterator It 1+n; s[G , G\, G 2 ] has type: 

$w . (-.jLj $w) . (— ? =1 $ m+4 w) . $ m+4 w 

As expected, the first argument of Iti +n;S [Go, G\, G 2 ] drives the iteration, G 2 is the base function, while Go 
and Gi are the inductive ones, chosen by the "bits" in the first argument itself of Iti +n;S [Go, G\, G 2 ]. 

To formally recall the behavior of the iterator, we need to assume that: (i) n, s > 0, a, n, n{, . . . , n^, ~s\, . . . , % 
be some words, (ii) {vo, V\, . . .} be a denumerable set of metavariables to range over {0, 1}, (iii) [x]' denotes a 
list with i e N copies of the word x, for any x. 

Also, we assume that: 

• G 2 OHi . . . n^'si . . . s^O rewrites to a word a, and 

• Gi OHi . . . n^'si . . . s^a rewrites to a word, denoted as r[Q,a,n\, . . . ,n n ,s\, . . .,s s ], and 

• for every m, i, such that m > 0, m - 1 > i > 0, 



Gy 



'm-(i+i) 

^ 2'"-< i+1 )-iv„ i 

» 7=0 



m ... n„si ... s s r[m -(i + l),a,ni,...,n„,s 1 ,...,s s ] 



Then: 



rewrites to a word, denoted as r[m — i, a,ri\, . . . , n n , s\, . . . , s s ]. 

It 1+n;s [Go, Gi, G 2 ] 0th ■ ■ ■ n^si ...s^^+a 

«T ... n^sT ... r[m,a,ni,...,n n ,si,...,s s ] 



Itl+n;s[Go, Gl, G2] 



£2/Vy#0 



The full details about Iti +tl;S [Go, Gj, G 2 ] are in [Rov07], whose keypoint is to prove that such a combinator is 
indeed representable inside WALT, giving its completeness w.r.t. CISRN. 
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4 Safe Recursion on Notation 

280 We recall two classes of functions: Safe recursion on notation (SRN) [BC92 J, and Composition-linear safe recursion 
on notation (CISRN), both in the style of [BW96J. Remark that Composition-linear safe recursion on notation 
was identified as Quasi-linear safe recursion on notation in |Rov07| . The reason for the name changing will be 
given in the conclusions (Section |7J. 



The signature of Safe recursion on notation. Let Esrn = U^; e j\jL s ' RN be the signature of Safe recursion on 
285 notation . Esrn contains the base functions and it is closed under the schemes called safe composition and safe 

recursion. For every ft:, Z e N, the base functions are the zero z k;l 6 Eg' RN , me successors s o ;1 / s ? ;1 ' the predecessor 

p 0;1 e E S ; RN , the projection nf 6 E^' RN , with 1 < i < k + 1, and the branching c ' 3 6 Eg 3 N . 

The safe composition is °jS?.,,[/, £i, ■ • -,gk>,h, ■ ■ -,h>] e Eif RN if / e E^, gi,...,#fc< e £* ; ° N , and/;, e E S ; RN , 

for every k, V ,\,V e N. 
290 The sfl/e recursion is r* +w [g, /i , /zi] e E s +1 '' if g e SRN kJ , and h , h x e E s +1 ' ,+1 . 



Safe recursion on notation. Let V be a denumerable set of names of variables, disjoint from Esrn • The set Safe 
recursion on notation (SRN) contains functions with signature Esrn- SRN is defined as follows. V C SRN, 
and for every k, I e N, if / e ^ S ' RN / and t\,..., £>, u\, ...,u\ e SRN, then f{t\, . . . ,t^,u\, . . . ,u\) e SRN. A term 
is closed if it does not contain variables of V. 



295 Notations and terminology, x, y,z . . . denote elements of V. t,u,v ... denote elements of SRN. For every 
/ e Egp^j, k and / are the normal and safe arity of /, respectively. For every k, I e N, such that I - k > 1, t[tj] 
denotes a non empty sequence tk, . . ., ti of I — k + 1 terms in SRN. fpt ; ;](i)/ with k <i <l, denotes the element f, 

of fpt ; q. 

An equational theory on SRN. The definition of the equational theory exploits that every natural number 
300 n can be written, uniquely, in binary notation, as L/lo 2 m ~ / v m _y. So, assuming to abbreviate the base 
functions s^' 1 , s®' 1 as So, Si, respectively, we can follow |MO04J and say that is equivalent to z 0;0 , and 
n > 1 to s Vo (. . . (s Vm _j(si z 0;0 )) . . .). Then, the equational theory is as follows. Zero is constantly equal to 0: 
z ' (x[i ; k], X[k+v,k+t\) = for any k, I e N. The predecessor erases the least significant bit of any number greater 
than 0: for every i e {0,1}, p 0;1 (0) = 0, and p 0;1 (s,(y)) = y. We shall use p as an abbreviation of p 0;1 . The 
305 conditional has three arguments. If the first is zero, then the result is the second argument. Otherwise, it is 
the third one: for every i e {0,1}, c 0/3 (0, i/o/ 3/i) = yo, and c°' 3 (s,(i/), y , i/i) = y\. The projection chooses one 
argument, out of a given tuple, as a result: for every 1 < i < k + I, n.' C% ; fc], ;%+i;jt+q) = 

The safe composition uses as arguments of / both the results of the normal functions gi,. ■■, gt, applied to k 
normal arguments, and the result of the safe functions hi,..., hy, applied to k normal and I safe arguments: 

o *; ! .,, [// gi, gk> , h, .. .,h> ](:? M/ x lk+VMn ) 

= f (gi(x[m)i ■ ■ -igv (%])/''i&i'4tw)' • • ■ 'hi'(Am,X[k+\k+i])) ■ 

The recursion iterates either the function ho, or h\, as many times as the length of its first argument. The 
choice between ho, and h\ depends on the least significant digit of the first argument, while the base of the 
iteration is a function g. The recursion is: 

^ +1 ' l [gMM\{Q,X[VM,X\k+i,k+i\) = g(X[i ; k],x [k+ i : k + i]) 
^ +V [g, h , fti](s;(x), x [U] , %+!#+/]) = hj(x, T k+V [g, h , h](x, x [U] , ^[jt+yt+q)) . 
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4.1 Composition-linear safe recursion on notation 

CISRN is SRN with a restricted form of safe composition, which we call linear (safe) composition. Its signature is 

♦g^'USl Sk'M hp] e Lg=^ if / € ^ciSRN' # 6 ^ISRN' and ^ 6 E cl S RN' with f G i 1 Z '>, 

for every k, li e N. Namely, unlike the general safe composition scheme of SRN, the safe arguments 

are used linearly: the list of safe arguments is split into as many sub-sequences as required by the safe arity 
of every safe function hj, with 1 < < V: 

°S' =1 '' lf'Si>---'gu,h,..., h v \ (x [U] , x [k+1 . Mh] , x {k+1+hMh+h] , x [k+1+L i'_-i w+i+z^ 1 ;,]) 

= / (gi (*[!*])/ (Am)' Mxiu], x [k+ i ;k+h] ), ...,h v tfim> hk+i+z^i h-Mi+L'U • 
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5 The full safe composition of SRN in WALT 

310 We know that WALT contains CISRN as its subsystem. Namely, it holds: 

Theorem 5.1 (|Rov07|.) There is a map J]], such that, if f{ti\ . . . ,n^,s\ . . . ,s{) belongs to CISRN, and f{n\, . . . ,n^,s\, 
...,si) = n, then . . . , n&, s\, . . . , s{)\ ^>* w n,for every n\, . . . , n^, s\, . . . , s;, n e N, in binary notation. 

Here we go further by defining the combinators that, using the base combinators of Section l33l give the full 
safe composition scheme of SRN as a term of WALT. The definitions here below will realize the functional 
315 blocks of the example in Figure[5] 

Sharing safe names. Let n, s > 0, m > 1, and a closed term M, with type {-»^ =1 $W) -• $<« w) -• $" ! W, 

be given. We call Y"; s the closed term that takes M and n + s words as its arguments. The first n arguments 
can be viewed as a normal ones, while the S second ones as safe. Then, Y",' s applies M to the normal and safe 
arguments, using as a value for the two last safe positions. Namely, the behavior is: 

Y^ ;s [M]nT . . .n^sT . . .si MnT . . .n^sj . . .s^sl 

Clearly, using the same safe value twice, after its duplication, we are sharing it. 
The type of Y,"' s is: 

((— - =1 $W) • (— s +l $ m W) • $ m W) • (— ^ $W) • $ m+4 W) — $ m+4 W 

The definition of Y"; s is: 

Iti +n; s[\^ x 1 ...x n y 1 ... i/s+i-0, \w.M, \wx 1 ...x n y 1 ... y s +i-y s ] T 

Rotating safe names. Let n, S > 0, m > 1, and a closed term M, with type (—^ $W) (-» s =1 $'"W) -• $'"W, 

be given. We call 0"; s the closed term that takes M and n + s words as its arguments. The first n arguments 
can be viewed as a normal ones, while the second S as safe. 0"f applies M to the normal arguments in the 
given order, while using si as value at position S, shifting all the others leftward. Namely, the behavior is: 

<J"; S [M]HT . . . n^sT . . . si S w Mn{ . . . n^sl . . . si si 

The type of 0"f is: 

(H"=i $w) • (— s j=1 $" ! w) . $ m w) • (— r =1 $W) . (— ? =1 fW) . fW 

The definition of Ojf is \x\...x n y s yi--- i/s-i-Mii . . .x n yi . . .y s . 

Multiple sharing of safe names. Let n, p, q > 0, and m > 1. Let M be a closed term with type (-» n =1 $W) -• 
(_P+q $ ,« W ) _. $m W/ when p > and (_,n^ $W ) _. $ ,» W/ when p _ Q We call mY ^ p ' q) the closed term that 

takes M and n + p + q words as its arguments. The first n arguments can be viewed as normal ones, while 
the second p + q as safe. If p > 0, and q > 1, then mY^ p ' q ' applies M to the normal and safe arguments, using 
as a value for the last q safe positions. Namely, the behavior is: 

q 

mY"; (p,q) [M]?iT...H^sT...^^; ( ,MnT...?^sT...s7s7...s^ (p > 0,q > 1) 
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Otherwise, mY"/ p,q ^[M] coincides to M. 
ThetypeofmY", ;(p ' q) is: 

((—,=1 $W) — (— p = +q $'"W) — $'"W) — (—^ $W) — (— p =1 $ m+ic *W) — $ m+4q W (p > 1) 

((— ^ $W) • $"'W) • (—^j $W) . $'"W (p = 0) 

The definition of mY^ p ' q ' is: 

mY", ;(p ' q) [M] = M (p = or q = 0) 

mY^[M] s y£ p [M] (p > 0) 

mY^[M] = Y^^ImY^^IAfl] (p > 0,q > 1) 

Multiple sharing and rotation of safe names. Let n, p, q > 0, and m>\. Let M be a closed term with type 

(—"=1 $W ) ~* (^ , /=i q $ '" W ) $ '" W ' when P - L and (~*"=i $W ) ~* $ "' W ' when P = °- We cal1 ° mY " ;(P ' q) 
the closed term that takes M and n + p + q words as its arguments. The first n arguments can be viewed as 

normal ones, while the last p + q as safe ones. If p > 1, then OmYj^ p ' q ' applies M to the normal arguments in 

the given order, while using s~{ as value in the last q positions, shifting all the others leftward. Namely, the 
behavior is: 



OmY," ;(p,q) [M] tii ■ ■ ■ "n si s 2 . . . s p n x . . . n n s 2 . . . s p si . . . s a (p > 1) 

Otherwise, with p = 0, OmY^ (p,q) [M] coincides to M, for any q. 
The type of OmY£ (p ' q) is: 

(HiU $ w ) - (^-=i q $'" w ) — $'" w ) — (— "=i $ w ) - (— jU $ m+4q w) - $ m+4c iw (p > i) 

((-?=! $w) • $"'W) • (-.^ $W) • $ m w (p = 0) 

The definition of OmY" f / p '* is: 

G< (M) [M]sM (p = 0orq = 0) 

OmY" H ;(1 ' q) [M] = mY"„ ;(1 ' q) [M] (p = 1) 

OmY^nM] ^ 0^ ;p 4q [mY^ p '*[M]] (p > 1) 



Square composition. The intuitive side first. Let G\, . . . , G n > be terms that we call normal for we think of them 
as functions with only normal arity n. Analogously, let Hi, ... , H s > be terms that we call safe since we look 
at them as functions with normal arity n, and safe arity Sj, for every 1 < j < s'. Let S = maxjSi, . . .,S S ',S'J; 
notice that S is determined comparing the safe arguments of every safe term and their total number s'. 
The behavior of & n f[F, Gj . . . G n ', Hi . . . H s >] comprises some phases, of which we have an example of result, 
contained in the innermost dashed box, labeled hJ' 3 , of Figure|5] Every normal argument of El"; s is replicated 
as many times as n' + S so that every copy can be dispatched to normal and safe terms. 

Then, the term F is used to generate F' with n' normal and S safe arities. F' behaves like F once erased 
its S — s' arguments. For example, the bullet aside [f]°, which plays the role of F in Figured represents the 
extension of F', with respect to F, that erases its third safe argument. The generation of H'- from Hj, with 
1 < j < Sj, is analogous to the one of F', from F: if necessary, every H'. erases s — Sj safe arguments. If F' has 
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to erase S — s' safe arguments, we supply them as the result of S - s' fake functions that erase all of their 

arguments and give a word as result. In Figure |5] there is a single fake function named ()•••, yielding 0. 

The normal and safe arguments of H^; s are replicated by using two different processes. The one for normal 
arguments is the standard eager diagonal, building every copy from scratch. Instead, every replica of a safe 
335 argument is obtained by using the above combinator that rotates and shares multiple safe values. Once all 
the required copies of safe arguments are at hand, they are rearranged, and appropriately distributed to 
H' V ...,H' S . 

Now, the technical side. Let us assume to have a set of closed terms F, G\, . . . , G n ', H\, ■ ■ ■ , H s < with the 
following types, respectively: 

(— ti $ w ) * H li $"' w ) * $ m w 

H,=i $W) — $"'W (ze{l,...,n'}) 
HU $W) - (-.^ $'"W) - $'"W (;' 6 {1, . . . , S'}) 

Let S = maxjSi, . . . , S s >, S'}. 
The type of E^; s is: 



((-£ a $W) • (-f =1 $ m W) • $ m W) - 

(K =a $ w ) • $ m w)) . 

H^! ((-" =1 $W) - $'"W) - $'"W)) - 

(— r=i $ w ) -■ $ 2m+i w) - $ 2,n+i w 

The definition of H^; s is: 

[F, d, . . . , CvHi, . . .,H S ,] = \m . . . nn.Eeg. n+s [G](ElJ[Vi, +s ] m) . . . (El*[V n , +s ] n n ) 

where: 

G =\<{xn . . . Xp'iyil ■ • . 1/sll) • ■ • \<t*ln • ■ • Xn'nyin • • ■ 1/sn}>- 

\WllWl2 • ■ • Wi s .\W2\W 2 2 ■ ■ ■ Wzs \^sl^s2 ■ • • ^SS- 

Ee o"n'+s[ F '] ( Gi *11 • • • *m) . . . ( G n' *n'l ■ ■ -*n'n) 

(Ee^ s [H;] (El} [Coerce'"" 1 ] y n ) . . . (El^Coerce™" 1 ] y ln ) am a* . . . w sl ) 
(Ee^FFJ (El{ [Coerce'"" 1 ] y u ) . . . (El^Coerce™" 1 ] y ln ) bu ii> 22 . . . a; s2 ) . . . 
. . . (Ee™-j s [Ff s ] (El| [Coerce" 1 " 1 ] y sl ) . . . (El 1 [Coerce'"" 1 ] y sn ) un, ro 2s . . . rv ss ) 
F' =\xi ...x n ,yi... y s .Fxi . . . x n ,y t . . . y s , 

H[ =\z n . . . z in wn . . . w iSi w iSi+ i . . . w is .Hi z n . . . z in w n ■ ■ ■ w is , (i 6 {1, . . s'}) 

H'j =\zp. . . . ZpWji . . . Wjs.O (j e is', . . . , s - s'|) 

G takes both n copies of the n' + s normal arguments, generated by the n instances of Elj[Vj|, +s ], and s 2 safe 
arguments. Then, it dispatches them to the terms G\, . . . , G n ' and H' v . . .,H' S . As we said, every H' takes s 
safe arguments and supplies only the first S, to H,. 
The behavior is: 

s s 

□, n „ ;S [F,Gi ...G n ,,Hi ...H s ,]n a ...n n ^...si s s ...s s Fgi..,g^h...h s > 

if G,- ~h~i . . . n n ~gi, with 1 < i < n', and Hi n\ . . . n n si ■ . . s s ~->* w hi, with 1 < j < s'. 
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5.1 Multiple sharing and rotation of safe names in a square composition. 

Let n, p, z > 0, m > 1, and a closed term M with type (-» n =1 $W) -• (-^ $ m W) -• $ m W be given. We call 

the closed term that takes M and n + i + p i words as its arguments. The first n arguments can be viewed 
as normal ones, while the last i + pi as safe ones. Then, yJ^ ! [M] replicates every of the i safe arguments 

Sp_,+i ... as many times as p. Finally the "blocks" S\...s{ SpTJ . . . s p _; s p _,+i . . . s p _ 1+ i Sp" . . . Sp", with 

p elements each, are used as the p 2 safe arguments of M. Namely the behavior is: 



y"; PV [M]«i ... M n Sp_ ;+ i . . .S p Si . . .Si S; . . . S; ^>* w M«i ...n n S\...S\ S p . . .S p 

The type of y"; pV [M] is: 

((—"=\ $ W ) - $™ W ) - $'" W ) (-""=1 $ W ) ^ (-f' P $ m+4(P_1)i W) - $ m+4 (P-D ! W 

The definition of Y^ pV '[M] is: 

Y^ ;pV [M] = M (p < 1 or i = 0) 

Y^ 1 [M]EO m y: (1+I « p ' p - 1) [M] 

Y^M] ^ OmY^J5g^ P ' P) [Yr- a [M]] (p > i > 0) 
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6 SRN-completeness of WALT 

345 We extend the completeness of WALT from CISRN [Rov07] to SRN. The key ingredients are square compo- 
sition and the multiple sharing of safe names of Section[5] 



Functions of SRN into WALT. We start defining a map [ ]° from the signature Lsrn to terms of WALT. Its 
clauses are identical to those mapping CISRN to WALT |Rov07J, but the one mapping the composition, of 
course. Here they are: 



350 


1. 


[z 0;0 ]° ee Elj[0], while [z tJ ]° = \m...n k si... s,.[z 0;0 ]°, for every k, I such that k + 1 > 1. 






2. 


[s° ;1 ]° ee Eb x [WsQ]. 






3. 


[s° ;1 ]° ee Eb x [Wsl]. 






4. 


[p 0;1 ]° ee Eb x [P]. 






5. 


[n¥]° = \xi... x k+h Xi, with 1 < i < k + I. 
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6. 


[c°- 3 ] ee \xyz3xyz. 






7. 


Let h [f]° : (— f =1 $W) — (V.' =1 $"'W) — $"'W, and h : (—^ $W) — $'"<W, with i e {1, . 


..,k'}, and 






I- [hj]° : (— k i=1 $W) — (—^ $ n iW) — $"< W, with ;' 6 {1, ...,/'). If p = max{m, mi, ... , m v , n lr . . 


. , riy }, and 



I - maxjZi, . . . , \\>, I'}, then: 



[°lyU,gX g*,h h V ]T = 

Y W [m^[\x x . . . ^.Ee^ ! [|/] ](Eli[Coerce''-' H - 1 ]x 1 ) . . . (El| [Coerce''-"- 1 ] x v ) 
,\xi... x k .Ee>' k ;' n [[giYKEll [Coerce^- 1 ] Xi ) . . . (El] [Coerce''-'"!" 1 ] x k ) 

,\ Xl ... xjt.Ee£* [[g k ]°](E1\ [Coerce^' - 1 ] Xl ) . . . (ElJfCoerce^- 1 ] x k ) 
,\ Xl ... x k .Ee p -^ [[/ !l ]°](El][Coerce''-"i- 1 ] xj) . . . (El* [Coerce^" 1 ] x k ) 

, \zi . • .^.Ee^ ! '' P.FKElJtCoerce''-"''- 1 ]*!) • ■ • (ElJ [Coerce''""'' - 1 ] x k )]] . 

8. If h [fif : $W • (— ^ $W) • (—j =1 $ m <W) • $ m 'W • $ ffl <W, with i 6 {0, 1}, and h [#]° : (-^ =1 $W) • 
(— 1 =1 $ ffl W) — $ m W, then: 

[r* +1; 'U,/o,/i]]° = Iti +M [fo,Fi,G] , 
where G ee Ee^ +1 [\n ni .. -n k si . ..s;r.[g]° n x . . .n k s t . ..s;],f ; ee Ee£~™J + J[/;] ], withp = max(m ,mi ; m|, 
andf e {0,1}. 

Interpreting SRN to WALT. Let 7? be the set of environments, such that, every p e "7? is a map from V to N. 
Then, [ ]] is a map from a pair in (SRN U Esrn) X f^, to WALT, inductively defined on its first argument: 

M P = lp(x)\ (x e V) 

[0] P = [0]° 

Wp = ur (/ e s SRN ) 

lf(.h,...,t k ,ui,...,u,)% = 

Ee-" +1 -»'[Ee;'-i ( [[/] p ](El^ Pl [p 1 I p ]) . . . (El^tPJp])] 
(ZI v -k [[urf,]) . . . (E1^'[[m,] p ]) (/ e E« N ) 
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when u = max{m,p x , ...,p^\,v = max(u - 1 + m,cj\ . . .,q{\, and: 



i- fl/VH-i $w) - (^ =1 $ m w) - $ m w 



ie {l,...,k} 
je{l,...,l) . 



Otherwise, [[ 1 is undefined. 

Weight of a term in SRN. For proving the statement that formalizes how we can embed SRN into WALT 
(Theorem |6 . 1 I below) we need a notion of weight of a closed term in SRN, which, essentially, gives a measure 
of its impredicativity. For every closed term t £ SRN U Esrn, wg(f) is the weight oft, defined by induction on 
t. If t is one among zero, predecessor, successor, projection, and branching, then wg(f) = 0. Otherwise: 



Theorem 6.1 (SRN is a subsystem of WALT.) Let k, I 6 N, / e £gR N , a«d i,t\,..., t k , u\,...,Ux he terms of SRN. 

1. There is anm>\ such that h [f]° : (— f =1 $W) — (-•' $'"W) — $ ffl W. 

2. lf(h, ...,tk, "1, ■ ■ • , ";)]]p is defined, for every p. 

3. \-ltJ:$' n Wwithm<wg(t). 

4. [[«]] n,for every n>0. 

5. Iff(n 1 ,...,n k ,s 1 ,...,s,) = n, then \[f(n 1 ,...,n k ,Sx,... / s{)J ^ n, for every n x , ... ,n k ,s x , s\,n e N. 

Point [TJ is a direct consequence of the typing of the combinators of WALT that we use in the definition of 
[f]°. Point |2] follows from point[T]here above and from the definition of [[ ]■ Point|3]holds by induction on t. 
Point |4] holds by induction on n. Point [5] holds by induction on /. Finally, by structural induction on t, we 
have: 

Corollary 6.2 (The embedding of SRN into WALT is sound.) Let t e SRN, and n e N. Ift = n, then p] p ^+ 
n,for every environment p. 



w S(° k k '!.,Af,gi, ■ ■ -,gk',h, ■ ■ -,h>]) = 3max{wg(/), wg(gi), . . . , wgfe), wg (h 1 ) / . . . , wg(fy), -} 

I 

w g( r,c+1;, [,?A,fri]) = 2max{wg(g),wg(/i ),wg(7z 1 ), -) 

1 

wg(/(f i, . . . , t k , Mi, . . . , «/)) = 2 max)wg(/), wg(^), . . . , wg(^), wg^j), . . . , wg(w,), - } 
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7 Conclusions and future work 

WALT is the first higher-order deductive system, derived from Linear logic, such that: (i) is sound and 

complete w.r.t. FP, (ii) is complete w.r.t. SRN, (iii) makes evident the layered nature of the almost flat 
375 normal/safe hierarchy about the arguments of the terms of SRN, and (iv) no constant symbol is required to 

obtain the point (iii), since every datatype can defined from scratch. 

In particular, point (ii) allows to say that the less an argument of a term of SRN is "polynomially 

impredicative", the deeper its representation is inside the stratified structure of the derivations of WALT. 

This relation between the polynomial impredicativity and the stratification suggests that a relation between 
380 WALT and Higher type ramified recurrence (HTRR) [BNS00 BS01|, or Higher linear ramified recursion 

(HOLRR) HDLMR04I should exist. We think that the most intriguing is the one between HTRR and WALT. 

The reason is that HTRR characterizes FP by a careful interplay of conditions about its types, built on an 

almost linear arrow type and !-modal types, and its terms, derived from Godel System T [G58J. The notions 

of complete/incomplete types, linked to their modality, the possibility of duplicating at will only ground 
385 types, and the affinability, which expresses linearity constraints on the bound variables of incomplete types, 

strongly recall the properties we enforce on — •, on its arguments and on the $-modal assumptions of !-boxes 

in WALT. 

A further investigation could go in the "backward" direction, namely from the structural proof -theoretical 
world, represented by WALT, to the recursive theoretical one, represented by SRN. 

Let us look at Figure [11] It fixes a hierarchy, based on syntactic restrictions. We already know what 





SRN 




RISRN 


bct 


CISRN 



Figure 11: A simple syntactic hierarchy 

390 

SRN, CISRN, and BC" are. Instead, RISRN, called Recursion-linear SRN, is "new". It is defined as the 
"complement" of CISRN w.r.t. SRN by restricting the recursive scheme of SRN to one that uses its safe 
variables linearly, while leaving the composition scheme untouched. 

SRN and CISRN should be both poly time complete, as consequence of the moral equivalence "full 
395 composition scheme of SRN recursion scheme + linear composition scheme of CISRN", we have proved 
in this work. 

Moreover, we know that BC~ is contained into the class of deterministic logarithmic space |Nee04). We 
can ask which is the space complexity of CISRN, which should not coincide to the one of SRN, because they 
develop different computation processes of, very likely, FP. Of course, the same questions maybe asked and 
400 answered about RISRN, so inducing a space hierarchy, which originates from a syntactic analysis of SRN, 
in its turn coming from the structural proof-theoretic roots of WALT. 
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A Some detailed proofs 

A.1 y£ pV [M] is well typed. 

For every p, this can be proved by cases on the value of p, and by induction on i. When p < 1 or i = 0, 
Y^'[M] is M with, at most, a single safe argument. So, the statement trivially holds. Let us assume p > 1 
and p > i > 1. 

The base case has i = 1. We start from the type (-»? =1 $W) — (-»f =1 $ m W) — $ ffl W of M, observing that: 



p-i 



p-i 



p-i 



p 2 = £p = p + £p = p- l + l + £p = (l + £p) + (p-l) 

k=\ k=\ k=\ k=l 

So, we can apply the clause defining Y^' P ^[M], getting that its type is the one of 
namely (—^ $W) - (—]lf^ P $ m+4 (P-«W) - $ m+4 (P-Dw. 
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By induction, the type of Y^ ;pV_1 [M] is (—^ $W) — (-.^^ 1>p $-+4MHw) — $ m +4(p-i)(>'~i) w . 
Observing that the following of equivalences hold: 

p-(i-l) p-/+l p-i p-i p-i 

(i-l)+ £ p = (i - 1) + £ p = (/-l) + p + £p = i-l + p-l + l + J]p = (i + ^p) + (p-l) 

t=i fc=i fc=a k=i jt=a 

we can transform the type of yJJ^ 1 1 [M] so that we can use it as argument of ^^^J^j^^'^^ • By definition, 
we get a term with the type we need. 

A.2 y"; pV '[M] well behaves. 

Let p = 0. Then, 



Ym° V [M] ni . . . n n s -, + i...s si...Si s, . . . s, = Mn t ...n n (5) 

where the sequences of safe arguments cannot exist since we assume that the indices of the safe arguments 
475 start from 1. So, 10 rewrites to M n{ . . . in steps. 
Let p > 1 and i - 0. Then, 



Y^ fA0 [M]«i...« n Sp_o + i...Sp si.. .si Sp_ ...s p _o =Mn 1 ...n n s 1 ...s 1 s p ...s p (6) 

where the inital sequences of safe arguments are those required directly by M. This is why Y "f^° [M] coincides 
to M and the statement holds relatively |0. 
Let p > 1 and i > 0. By induction, we have: 

i-l P P P P 



Ym PV 1 [M] Mi . . . « n S p _(;_i) +1 ... S p Si ... Si S,_i . . . S;_i Mttl . . .M n Si . . .Si S p . . . S p 

We also know that, for every term N with the right type, depending on m': 

i-l p p 



, , n;(i-i+EP:; ,M) p,p) — — = 

: 1 " [Nj Mi . . . « n Sp_ (i _i) S p _ (/ _i )+ i ... S p Si ... Si S p _(j_x)-1 • • • Sp-(,-l)-l 



i-l 



Nni . . . n n Sp_(i_i) + i . . . s p si . . . si s p _(,_i)_i . . . s p _(,_i)_i s p _ ( ,_i) . . . s p _ ( ;_i) (7) 

So, in 0, N can be y"; pV_1 [M] with m' = m + 4(p - l)(z - 1). But, by definition, 

m+4(p-l)(j-l) L m 

is OmY^ ,+ ^* =1 P,P ^[M], hence with the behaviour we want. 



